Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/i_5nBOkG-UmitXX9u_Bvkr1Xn_A.roa
File: i_5nBOkG-UmitXX9u_Bvkr1Xn_A.roa (raw, json)
Hash identifier: 8ycx+xeidcqZpfeE6Z7kglGCRYg5wUm0ms68JkpDKxI=
Subject key identifier: 8B:FE:67:04:E9:06:F9:49:A2:B5:75:FD:BB:F0:6F:92:BD:57:9F:F0
Certificate issuer: /CN=6dbd51576b4a93460a465af35e6bf550f5548894
Certificate serial: 0A9B12
Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/i_5nBOkG-UmitXX9u_Bvkr1Xn_A.roa
Signing time: Thu 28 Apr 2022 11:32:58 +0000
ROA not before: Thu 28 Apr 2022 11:32:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209788
IP address blocks: 95.183.44.0/23 maxlen: 24
95.183.46.0/24 maxlen: 24
188.68.91.0/24 maxlen: 24
188.68.90.0/24 maxlen: 24
188.68.93.0/24 maxlen: 24
188.68.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 695058 (0xa9b12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894
Validity
Not Before: Apr 28 11:32:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8bfe6704e906f949a2b575fdbbf06f92bd579ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:84:73:97:9e:9c:0f:65:25:ec:7f:d3:28:21:
50:ff:5a:bc:8c:57:7f:2a:2d:45:b2:eb:2f:c7:77:
7b:02:fb:c3:c5:72:5c:7e:32:43:fe:ba:a0:c3:31:
f3:34:38:05:d6:3a:80:d7:d2:a0:b6:43:8b:aa:ff:
72:46:bf:6e:a7:b8:18:02:57:f2:f4:d0:3a:5a:71:
a9:67:80:a4:49:68:9a:aa:f0:b6:ba:dc:a7:1a:64:
4e:3a:ef:4b:f3:93:7d:78:1d:ba:44:3d:6a:09:a6:
a0:24:7d:7e:d4:86:c8:54:e1:ba:8a:4e:d8:af:43:
68:8d:97:8b:9b:59:7e:8e:b7:cf:df:eb:7e:51:2b:
3b:bd:45:6d:ec:bd:11:5b:61:2d:2a:72:54:33:66:
c8:58:c0:bd:d4:d3:8c:61:2e:74:6d:38:b5:a2:93:
01:12:de:c8:9a:e0:ed:e4:0a:4d:e1:eb:5f:b8:2c:
46:03:81:a5:ad:04:35:a1:b7:7f:ed:04:b2:55:fc:
74:74:ae:ed:67:c4:1a:ed:10:93:b9:2a:74:04:ce:
da:4b:c8:ef:66:68:8e:62:38:82:8d:c2:16:5b:62:
b4:df:1a:46:10:7b:52:73:1c:c6:67:79:7c:ee:ca:
2c:17:63:dc:b1:79:33:00:67:a1:5e:32:02:78:02:
db:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FE:67:04:E9:06:F9:49:A2:B5:75:FD:BB:F0:6F:92:BD:57:9F:F0
X509v3 Authority Key Identifier:
keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/i_5nBOkG-UmitXX9u_Bvkr1Xn_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.183.44.0-95.183.46.255
188.68.90.0-188.68.93.255
Signature Algorithm: sha256WithRSAEncryption
96:1d:4d:61:90:07:ab:e7:b3:54:9c:96:a7:5c:d6:c5:2e:b6:
d2:5d:82:a4:6a:f6:06:b1:84:67:2e:56:28:0c:22:cc:f4:be:
1d:c9:04:a9:60:26:54:67:d5:07:69:cd:45:5d:02:97:d6:b0:
1e:2e:86:2f:73:a8:72:c7:76:1c:3f:6a:1f:0f:2c:8b:9b:fa:
ec:33:ce:c9:d4:06:24:61:8c:10:3c:ab:5d:1e:1f:21:77:bf:
64:f1:e0:2f:df:b2:49:45:2e:35:e5:71:48:0d:df:4a:69:52:
5e:96:ee:8a:23:a0:60:d1:2b:6f:37:be:85:57:fa:54:45:da:
4e:67:78:a1:18:29:28:ef:e9:03:4a:f7:15:2c:ac:c3:0b:04:
64:26:8d:a5:d8:85:04:74:1a:8f:54:78:08:d4:f2:20:ee:6b:
46:14:08:69:8c:37:74:4a:42:41:d7:4a:71:5f:6b:6d:0d:09:
03:67:57:3c:ed:be:07:c9:a9:18:38:e4:b2:1a:9d:d9:1c:7b:
bd:27:dc:5c:34:dc:6f:4e:22:67:64:b7:a7:90:e0:3d:e1:60:
9a:6a:8f:a7:98:7f:c6:d0:bd:b5:8d:e7:fa:22:f2:6d:5e:34:
ff:e2:0d:71:ab:3f:ce:30:34:6b:61:6a:a2:01:6b:c8:fd:5d:
c5:d1:43:67
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIDCpsSMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDZk
YmQ1MTU3NmI0YTkzNDYwYTQ2NWFmMzVlNmJmNTUwZjU1NDg4OTQwHhcNMjIwNDI4
MTEzMjU4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyg4YmZlNjcwNGU5MDZm
OTQ5YTJiNTc1ZmRiYmYwNmY5MmJkNTc5ZmYwMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuoRzl56cD2Ul7H/TKCFQ/1q8jFd/Ki1Fsusvx3d7AvvDxXJc
fjJD/rqgwzHzNDgF1jqA19KgtkOLqv9yRr9up7gYAlfy9NA6WnGpZ4CkSWiaqvC2
utynGmROOu9L85N9eB26RD1qCaagJH1+1IbIVOG6ik7Yr0NojZeLm1l+jrfP3+t+
USs7vUVt7L0RW2EtKnJUM2bIWMC91NOMYS50bTi1opMBEt7ImuDt5ApN4etfuCxG
A4GlrQQ1obd/7QSyVfx0dK7tZ8Qa7RCTuSp0BM7aS8jvZmiOYjiCjcIWW2K03xpG
EHtScxzGZ3l87sosF2PcsXkzAGehXjICeALb0QIDAQABo4ICHzCCAhswHQYDVR0O
BBYEFIv+ZwTpBvlJorV1/bvwb5K9V5/wMB8GA1UdIwQYMBaAFG29UVdrSpNGCkZa
815r9VD1VIiUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
YmIxUlYydEtrMFlLUmxyelhtdjFVUFZVaUpRLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC84MS84ZmY1MzctNzFlMC00MDNiLTk3OWUtMWVmN2VmMTdmYTQzLzEv
aV81bkJPa0ctVW1pdFhYOXVfQnZrcjFYbl9BLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84
ZmY1MzctNzFlMC00MDNiLTk3OWUtMWVmN2VmMTdmYTQzLzEvYmIxUlYydEtrMFlL
UmxyelhtdjFVUFZVaUpRLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMDUG
CCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAJftywDBABfty4wDAMEAbxEWgME
AbxEXDANBgkqhkiG9w0BAQsFAAOCAQEAlh1NYZAHq+ezVJyWp1zWxS620l2CpGr2
BrGEZy5WKAwizPS+HckEqWAmVGfVB2nNRV0Cl9awHi6GL3Oocsd2HD9qHw8si5v6
7DPOydQGJGGMEDyrXR4fIXe/ZPHgL9+ySUUuNeVxSA3fSmlSXpbuiiOgYNErbze+
hVf6VEXaTmd4oRgpKO/pA0r3FSyswwsEZCaNpdiFBHQaj1R4CNTyIO5rRhQIaYw3
dEpCQddKcV9rbQ0JA2dXPO2+B8mpGDjkshqd2Rx7vSfcXDTcb04iZ2S3p5DgPeFg
mmqPp5h/xtC9tY3n+iLybV40/+INcas/zjA0a2FqogFryP1dxdFDZw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:02 2024 by rpki-client on console-fra.rpki-client.org